PRICING

Straightforward pricing for hands-on offensive security testing.

Here’s how we structure engagements, what drives cost, and what most projects run.
No automated scans dressed up as findings, and no pricing games either.

Schedule a Call
Download Our Services Catalog
$340/hr
Standard consulting rate
25
Minimum PETaaS® credits
15%
Max volume discount
Straightforward Pricing
HOW WE PRICE

Two models, one standard of work

Prices vary based on a variety of factors, but we make sure that every engagement gets the same manual, expert-led testing.
You can choose per-project simplicity or the flexibility of prepaid capacity. 

Flat Fee

$340/ hour
$2,720 / day

Each engagement is individually scoped and priced based on days of effort and number of consultants. Every project is documented in a standalone statement of work.

Best for: organizations that prefer to evaluate and approve engagements on a per-project basis.
Most Flexible

PETaaS® Credits

$2,520/ credit
1 credit = up to one full day of expert work · 25 credit minimum

Purchase capacity upfront and deploy it across any combination of services as your needs evolve throughout the contract period.

  • Apply credits to any effort-based service
  • Reallocate as priorities shift, no rescoping
  • Advisory support included at no extra cost
  • Transition between models anytime
SERVICES

What project pricing typically starts

Every quote is scoped to your environment, so treat these example costs as entry points, rather than as ceilings.
Talk to us for a number specific to your scope.

Internal Penetration Testing
Internal Penetration Test
Assumed-breach and threat-led testing of internal network security, lateral movement, and privilege escalation paths.

STARTING AT

$13,600
External Penetration Testing
External Penetration Test
Testing against internet-facing infrastructure, cloud resources, and perimeter defenses from a remote attacker’s perspective.
STARTING AT
$8,160
01
Web Application Test
Manual testing for business logic flaws, authentication weaknesses, and authorization bypass. Guided by OWASP.
STARTING AT
$13,600
03
Mobile Application Test
Covers testing of on-device storage, API communication, and backend services for iOS, Android, and cross-platform apps.
STARTING AT
$13,600
04
API Penetration Test
Direct testing of RESTful, SOAP, and GraphQL endpoints, including auth handling, rate limiting, and data exposure.
STARTING AT
$10,880
Red Team Pentesting
Red Team Engagement
Objective-based simulation of a realistic adversary, aligned to MITRE ATT&CK, to test detection and response.
STARTING AT
$40,800
Engage Experts
Social Engineering
Phishing, vishing, smishing, and pretexting campaigns designed to test personnel awareness and reporting.
RATE
$340/hr
05
Physical Security Testing
Controlled intrusion attempts including tailgating, badge cloning, lock bypass, and on-site social engineering.
RATE
$340/hr
07
Wireless Network Testing
Assessing encryption, authentication, rogue access points, and susceptibility to evil twin and relay attacks.
STARTING AT
$8,160
02
OT & Embedded Systems
Testing of ICS, SCADA, PLCs, and embedded devices, including firmware extraction and hardware inspection.
STARTING AT
$13,600
Security Assessments
Security Assessments
Cooperative reviews of architecture, configuration, policy, and compliance readiness against your target framework.
STARTING AT
$16,300
02
Tabletop Exercises & Advisory
Incident response exercises for executive and technical teams, plus on-demand access to senior consultants.
STARTING AT
$8,160

These example figures reflect the smallest defined scope tier for that service at flat-fee pricing. Costs may vary. Actual cost depends on breadth, depth, and the engagement model you choose.

Want every tier, side by side?

Our full Services Catalog breaks down small, average, large, and enterprise scope for every service, plus flat fee and PETaaS® pricing for each.

Download Our Services Catalog
services

THE CREDITS SYSTEM

Buy more capacity, pay a lower rate

With our Professionally Evil Testing as a Service (PETaaS®) credits model, you gain access to streamlined procurement of our full range of offensive services with up-front costs.

Discounts apply automatically once you cross a credit threshold, and they’re applied to the invoice in which the tier is attained. No renegotiation required.

  • You may move from Flat Fee to PETaaS® anytime by purchasing the difference in credits.
  • Any outstanding credits have their expiration date reset to align with the new purchase.
  • Your earned discount tier continues to apply after the transition.
Discount Credits Investment Range
5% 30 – 49 $71,820 – $117,306
10% 50 – 89 $113,400 – $201,852
15% 90+ $192,780+
Minimum purchase is 25 credits. Discount tiers begin at 30.
Learn More About PETaaS®
Schedule a Call
WHAT AFFECTS COST

The variables behind every quote

We scope every engagement based on your specific environment and goals, and never use a generic formula.
The following four factors that can impact overall costs:

1. Type & Breadth What's being tested, and how much of it. A single web app is a different scope than a full internal network or a chain of retail locations.
2. Depth How far we go once we find something. Identifying and reporting a vulnerability takes less effort than fully exploiting and pivoting to deeper access.
3. Rate Effort in hours multiplied by our hourly rate. We bill $340/hour, consistent whether you choose flat fee or credits.
4. Modifiers Miscellaneous costs that can affect effort. Travel, after-hours, attestation letters, retesting, or special reporting requirements can adjust the final quote.

Typical base cost across most engagement types:

$10K–$45K
Typical base cost across most engagement types

Most of our first-time clients land somewhere in this range.
Highly complex, multi-week engagements, like full-scope red teams, usually run higher.
Reach out to get a number specific to your needs.

This website uses cookies

We use cookies to personalize content, provide social media features, and analyze our traffic. We also share information about your use of our site with our analytics partners. You can change your preferences at any time. For more information, please see our Privacy Policy.